WO2018157667A1

WO2018157667A1 - Method and device for generating password

Info

Publication number: WO2018157667A1
Application number: PCT/CN2018/072025
Authority: WO
Inventors: 肖建华; 王晓静
Original assignee: 中兴通讯股份有限公司
Priority date: 2017-02-28
Filing date: 2018-01-10
Publication date: 2018-09-07
Also published as: CN108512657A; CN108512657B

Abstract

Disclosed is a method for generating a password, comprising: obtaining characteristic data of an object to be logged in and a core user password; generating a key on the basis of the core user password; performing encryption operation on the key and the characteristic data to obtain a user password, which is used for logging in the object to be logged in. Also disclosed is a device for generating a password.

Description

Password generation method and device

Technical field

The present disclosure relates to information security technologies, and in particular, to a password generation method and apparatus.

Background technique

With the advancement of information technology and the popularity of smart terminals, information security has received more and more attention and attention from the public. In many terminal applications, websites, etc., users must register user names and user passwords. Generally, passwords with relatively complicated passwords are highly secure. Therefore, when users register applications or websites, the system prompts users to set more complicated passwords. However, in order to facilitate the memory, users often set the user password according to their personal information (such as: name, birthday, phone number, ID number, etc.), and even the user will use the same user name and user password in different applications or websites. . Although these user passwords are easy to predict and regular, criminals can easily access and target user accounts in a targeted manner. Especially when the user information data stored in an application or website is leaked, the criminals can easily guess the user's password in other applications or websites, and all the account information of the user may be broken. Security risks.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The embodiments of the present disclosure provide a password generation method and apparatus to improve the security of a user account password and facilitate user operations.

An embodiment of the present disclosure provides a password generating method, including: acquiring feature data of a to-be-registered object and a core user password; generating a key based on the core user password; using a first preset encryption algorithm, the key and the The feature data is subjected to an encryption operation to obtain a user password, wherein the user password is used to log in to the object to be logged in.

The embodiment of the present disclosure further provides a password generating apparatus, including: a data input module, a key generation module, and a cryptographic operation main module, wherein the data input module is configured to acquire feature data of a to-be-registered object and a core user password; The key generation module is configured to generate a key based on the core user password; the password operation main module is configured to adopt a first preset encryption algorithm, perform encryption operation on the key and the feature data, and obtain a user password. The user password is used to log in to the object to be logged in.

Embodiments of the present disclosure also provide a computer readable storage medium storing computer executable instructions that, when executed by a processor, implement the methods described above.

An embodiment of the present disclosure provides a method and an apparatus for generating a password, where first, acquiring feature data of an object to be logged in, then acquiring a core user password, and generating a key based on the core user password, and finally adopting a preset encryption algorithm. The user password is obtained based on the key and the feature data of the object to be logged in, so that the user password can be used to log in to the object to be logged in. In the embodiment of the present disclosure, the feature data corresponding to the object to be logged in is generated according to the feature information of the application or the website, the registered user name, the time information of the registered user name, and the like, and according to the core user password and the object to be logged in. The feature data generates the user password required by the user. Therefore, the user password meets the characteristics of strong randomness, less storage space requirement, difficulty in cracking, and unrelated passwords of different applications, thereby greatly improving the security of the user account password, The user can log in only by remembering the core user password, which is convenient for the user to operate and provides a good user experience.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

DRAWINGS

1 is a schematic structural diagram of a password generating apparatus in an embodiment of the present disclosure;

2 is a schematic flow chart of a password generating method in Example 1 of the present disclosure;

3 is a schematic flowchart 1 of a method for generating a password in Example 2 of the present disclosure;

4 is a schematic flowchart 2 of a method for generating a password in Example 2 of the present disclosure;

5 is a schematic flowchart 3 of a method for generating a password in Example 2 of the present disclosure;

FIG. 6 is a schematic structural diagram of a password generating apparatus in Example 3 of the present disclosure.

detailed description

The schemes in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present disclosure.

The embodiment of the present disclosure provides a password generating method, which is applied to a password generating device, and the device can be applied to a terminal such as a smart phone, a tablet computer, a notebook computer, a smart watch, etc., which supports login of an application or a website with user account information. In practical applications, the method can be applied to various occasions requiring passwords in the terminal identity authentication service and the identity registration service, such as logging in to a website, logging in to a social application, dialing a network, and the like. Illustratively, a user may generate a high password strength user password that conforms to the website password setting rules by the device when registering an account for a website.

In the embodiment of the present disclosure, FIG. 1 is a schematic structural diagram of a password generating apparatus according to an embodiment of the present disclosure. Referring to FIG. 1 , the apparatus includes: a data input module (DIM) 101 and a key generation module ( KGM, Key Generation Module 102, MEM (Main Encryption Module) 103.

The DIM is set to obtain feature data of the object to be logged in;

The feature data of the object to be logged in may be generated by one or more of the feature information of the application or website to be logged in, the user name, the date of registering the user, or the date the password is modified, thereby ensuring the characteristic of the input data. Here, the feature information of the application or the website to be logged in refers to the information that can uniquely represent the application or the website, so that the application or website to be logged in is different from other applications or websites, and in the actual application, the application or website to be logged in The feature information may refer to an application name, a website domain name, a number set in advance for each application or website, and the like.

KGM is set to obtain the core user password input by the user, and generate a key calculated by the core user password;

The core user password is the only information that the user has to remember. When the user uses the user password to log in to the application or website, the core user password can be entered. The key is the key required by the MEM to perform the encryption operation to generate the user password;

The MEM is set to perform an encryption operation based on the above key and feature data to obtain a user password.

In this way, the user password required by the user is generated according to the core user password and the feature data of the object to be logged in, and the feature data of the object to be logged in is the feature information, the user name, the registered user, or the user or the website to be logged in. The password is modified by one or more of the data, etc., so the user password has strong randomness, less storage space requirement, is difficult to crack, and the password of different applications is not related, and can greatly improve the password of the user account. Security, and users can log in only by remembering the core user password, which is convenient for users to operate and provide a good user experience.

The password generation method provided by the embodiment of the present disclosure will be described below in conjunction with the above apparatus.

Example one

2 is a schematic flowchart of a method for generating a password in the first example of the present disclosure. Referring to FIG. 2, the method includes:

S201: Acquire feature data of the object to be logged in;

Here, the to-be-registered object may be an application software, such as a live chat application, a shopping application, etc., or may be a website, such as a video playing website, a search website, etc., of course, other objects that support the login function of the user identity information. For example, the local area network is interconnected, and the embodiments of the present disclosure are not specifically limited herein.

The feature data of the to-be-registered object is composed of at least one of the feature information of the object to be logged in, the user name registered in the object to be logged in, and the time information corresponding to the object to be logged in. The time information may be the user. The time information of the user name registered in the object to be logged in, or the time information of the user password used to log in to the object to be logged in.

In the actual application, if the user has not modified the user password, the time information refers to the time of registering the user name; if the user has modified the user password, the time information is updated to the last time the user password is modified. The time, thus, the time information refers to the time when the user last modified the password of the user used to log in to the object to be logged in.

In the specific implementation process, in order to ensure the independence between the user passwords of the respective login objects, it is necessary to obtain corresponding feature data that is independent of each other and can identify the login object. Therefore, the feature data of the object to be logged in may be characterized by a feature that can uniquely represent the application or website to be logged in, such as a number assigned in advance to the object to be logged, an application name, a website domain name, etc., and a user's use in registering the identity information. A user name, a personal mailbox, etc., and time information, such as one or more data in the data such as the date of the registered user or the date when the user password was modified.

In practical applications, when a user registers identity information in an application or a website, such as registering account information, or when a user authenticates an identity information to log in to an application or a website, the DIM can obtain the feature information of the website or application to which the user is to log in. Data such as the user name registered by the user, the date the user registers or changes the password, and serially splicing the data to generate feature data as input data of the DIM.

In the specific implementation process, in order to facilitate the generation of the user password when the user is to log in to the object, the user may register the identity information, and the feature information of the website or application to which the user is to be logged in, the user name registered by the user, the user registration or The data such as the date of the modified password and the feature data generated by the DIM are stored in the database, so that when the user wants to log in to the corresponding application or website with the previously registered identity information, the DIM can be based on the characteristics of the application or website to be logged in. Information, such as the application name, website domain name, etc., finds the corresponding feature data from the database.

In other embodiments of the present disclosure, in order to ensure the security of the user password, the terminal may update the feature data according to the operation of the user or periodically. For example, when the terminal determines that the feature data is to be updated, the feature data may be updated using the current date.

S202: Obtain a core user password.

Here, the core user password may be set by the user, or may be assigned to the user by the login application or the website when registering, wherein each user is assigned a unique core user password.

In practical applications, the only information that the user has to remember is the core user password. When the user uses the user password to log in to the application or website, the core user password can be entered.

S203: Generate a key based on a core user password.

Here, the KGM can use the core user password to generate the key required for the MEM to perform the encryption operation.

In a specific implementation process, the S203 may include: using a second preset encryption algorithm, encrypting and calculating a core user password to obtain a source password; and extracting, by using a source password, a preset length of data as a key.

The preset length is a key length used when the first preset encryption algorithm performs an encryption operation.

When a user logs in to an application or website using a user password, the user can enter the core user password. After the user inputs the core user password, the KGM obtains the core user password and starts the user password generation function, and then uses the second preset encryption algorithm to encrypt and calculate the core user password to obtain the source password. Finally, the KGM can intercept the data of the key length from the source password according to the key length required for the MEM to perform the encryption operation as the key required for the MEM to perform the encryption operation.

In the actual application, the Hash encryption algorithm such as SHA256, SHA384, and SHA512 may be used as the second preset encryption algorithm. Of course, other encryption algorithms may be used as the second preset encryption algorithm. Here, the embodiment of the present disclosure does not specifically limited. When the second preset encryption algorithm is SHA256, SHA384 or SHA512, respectively, the length of the source password obtained by the KGM may correspond to 32, 48 or 64 bytes.

The key length may be determined according to an encryption algorithm used when the MEM performs an encryption operation, or may be preset before the terminal leaves the factory. The data of the key length may be obtained from the source password in the order from the back to the front, from the back to the front, or other order, and the data of the obtained key length is determined as required for the MEM to perform the encryption operation. Key.

Exemplarily, if the key length required for the MEM to perform the encryption operation is 128 bits, and the source code calculated by the KGM according to the core user password is 32 bytes, then the KGM can intercept the first 128 bits of the source password as the key. The KGM can also intercept the last 128 bits of the source password as the key. Of course, the 128-bit data can be intercepted from the source password as a key, which is determined by a person skilled in the art in the specific implementation process. Here, the embodiment of the present disclosure No specific restrictions.

S204: Perform an encryption operation according to the key and the feature data to obtain a user password.

Here, after the DIM obtains the feature data of the object to be logged and the KGM calculates the key according to the core user password, the MEM acquires the feature data and the key, and then uses the first preset encryption algorithm to use the key for the feature data. Perform an encryption operation to obtain a user password. In this way, the user can get the user password associated with the currently pending object.

In an actual application, in order to improve the efficiency of generating a user password, the first preset encryption algorithm may be a symmetric encryption algorithm, such as Advanced Encryption Standard (AES), Data Encryption Standard (DES), triple The data encryption algorithm (TDEA, Triple Data Encryption Algorithm), etc., of course, may also be other encryption algorithms, and the embodiments of the present disclosure are not specifically limited herein.

In the specific implementation process, the S204 may include: using a symmetric encryption algorithm to perform operations on the key and the feature data to obtain an encryption operation result; and obtaining a password setting rule of the object to be logged in, wherein the password setting rule at least includes the object to be logged in to support The type of the password character and the length of the password; the encryption operation result is processed according to the password setting rule, and the user password is obtained.

The MEM first encrypts the feature data of the object to be logged by the DIM based on the key calculated by the KGM, and obtains the result of the encryption operation. Then, the MEM obtains the type of the password character and the length of the password supported by the object to be logged in. Finally, each byte data of the encryption operation result is mapped to a character in the password character type supported by the object to be logged, and then the character matching the password setting rule of the object to be logged is obtained according to the password length supported by the object to be logged in. String, which is ultimately determined as the user password.

In practical applications, the longer the number of passwords, the higher the number of symbols used, and the higher the security of the user password. Therefore, when generating the user password according to the password setting rule of the object to be logged in, the most The user password is formed by various combinations of lowercase letters such as 'a-z', uppercase letters such as 'A-Z', numbers such as '0-9', and special characters such as '*, _'.

At this point, the user password generation process is completed. In this way, the terminal can automatically fill in the user password into the password text box to use the user password to log in to the application or website.

In this example, first, acquiring feature data of the object to be logged in, then receiving a core user password input by the user, and generating a key based on the core user password, and finally, using the preset encryption algorithm, the key and the to-be-registered The feature data of the object is encrypted and the user password is obtained, so that the user password can be used to log in to the object to be registered. In the embodiment of the present disclosure, the feature data corresponding to the object to be logged in is generated according to the information of the application or the feature information of the website, the user name, the registered user, or the date of modifying the password, and according to the core user password and the characteristics of the object to be logged in. The data generates the user password required by the user. Therefore, the user password meets the characteristics of strong randomness, less storage space requirement, difficulty in cracking, and unrelated passwords of different applications, which greatly improves the security of the user account password, and makes the user Log in only by remembering the core user password, which is convenient for the user to operate and provides a good user experience.

Example two

Based on the foregoing example, in an actual application, the user may register the identity information in the application by using the user password generated by the terminal, or regenerate the user password when logging in to the application, so as to log in to the application, and of course, when the user password is changed. Generate a new user password.

The password generation method provided by the embodiment of the present disclosure is described in detail below in conjunction with the above three application scenarios.

First, the process of generating a user password when the user registers the identity information is introduced.

Then, FIG. 3 is a schematic flowchart 1 of the password generation method in the second example of the disclosure. Referring to FIG. 3, the method includes:

S301: Receive registration information input by the user, and obtain feature information of the target application and current system time information;

Here, when the user wants to register the identity information in the target application, in order to generate a highly secure user password, the feature data for generating the user password is acquired. The user can fill in the registration information, such as the user name, personal mailbox, contact information, etc. in the registration interface of the target application. Then, the DIM receives the registration information input by the user, and obtains the feature information of the target application from the target application, such as an application. Name, application server domain name, etc., and then obtain current system time information from the terminal as the date of user registration. Here, the date of user registration refers to the time information of the user registering the user name in the target application.

S302: categorize the feature information, the registration information, and the current system time information to generate feature data.

Exemplarily, if the feature data acquired by the DIM includes the feature information (APK_Info) of the application, the user name (User_Name), and the date of the user registration (Current_Time), the feature data Data_Para obtained by the DIM may use the following expression (1). To represent,

Data_Para=APK_Info||User_Name||Current_Time (1)

Where "||" indicates a data concatenation operation.

In practical applications, in order to facilitate the generation of feature data, the terminal may encode the feature information of each application, such as the code of the "payment application" is 0x00000001, the code of the "chat application" is 0x00000003, and the terminal may also give each user name. Coding, such as "Zhang San" is 0x12345678, "Li Si" is 0x12345679; the terminal can also encode the time information, such as "14:05 on December 13, 2016" can be coded as 0x0000201611131405. Here, the encoding of the application and the encoding of the username are respectively 4-byte data, and the encoding of the registered user date is 8-byte data.

In this way, it is assumed that the feature information of the target application obtained by the DIM is the application name “payment application”, the registration information input by the user is the user name “Zhang San”, and the current system time is “14:05 on December 13, 2016”. Then, according to the above expression (1), the codes corresponding to "payment application", "Zhang San", and "14:05 on December 13, 2016" can be concatenated in series to form feature data, and thus, the feature The data can be expressed as 0x00000001123456790000201611131405.

S303: Receive a core user password input by the user.

S304: Generate a key according to a core user password.

In the specific implementation process, KGM can use the Hash encryption algorithm such as SHA256, SHA384, SHA512 to encrypt the core user password to obtain the source password; then, the preset length data is intercepted from the source password to obtain the key.

In practical applications, when the hash encryption algorithm is SHA256, SHA384, or SHA512, the length of the source password obtained by the KGM may correspond to 32, 48, or 64 bytes.

Exemplarily, assuming that the core user password obtained by the KGM is User_Key, the source password Source_Key obtained by calculating the core user password by the hash encryption algorithm may be expressed by the following expression (2).

Source_Key=Hash(User_Key) (2)

Among them, Source_Key is the result of Hash encryption operation.

Exemplarily, if the key length required for the MEM to perform the encryption operation is 128 bits and the Source_Key is 32 bytes, then the KGM can intercept the first 128 bits of the Source_Key data as the key Key, so that the Key can be represented by the following expression (3). ,

Key=Source_Key[0:127] (3)

Among them, Key is the key, Source_Key is the source password, and [0:127] indicates that the data from the 0th to the 127th bits are intercepted.

Of course, referring to the expression (4), the KGM can also intercept the last 128 bits of the Source_Key as the key Key.

Key=Source_Key[128:255] (4)

Among them, Key is the key, Source_Key is the source password, and [128:255] indicates that the data from the 128th to the 255th bit is intercepted.

S305: Perform an encryption operation according to the key and the feature data to obtain a user password.

After the MEM obtains the key Key and the feature data Data_Para, it sets the number of rounds of the AES encryption operation to 0. Then, as shown in the expression (5), the Data_Para and the Round are added, using the Key. The AES encryption operation is performed as a key to obtain a password code User_Code; finally, a character string satisfying the password length required to register the application is generated according to User_Code. In this way, the user password required by the user is obtained.

User_Code=AES _Key (Data_Para+Round) (5)

Among them, User_Code is the result of AES encryption operation, Key is the key, Data_Para is the feature data, Round is the number of operation rounds of AES encryption operation, and Round is greater than or equal to 0.

In practical applications, Round can be set to 0 when AES encryption operation is initialized. If it is determined that the length of the string mapped by User_Code is less than the length of the password required to register the application, Round can be incremented and User_Code can be recalculated until User_Code is mapped. When the length of the string is equal to the length of the password required to register the application, the string is determined to be the user password.

The length of the user password generated by the MEM may be specified by the user in advance, or may be determined by the MEM according to the password length in the password setting rule of the target application. Here, the embodiments of the present disclosure are not specifically limited.

In this way, after the user successfully registers the identity information on the target application, the identity information can be used to log in to the target application.

Secondly, it introduces the process of generating a user password when the user logs in to the application.

Then, FIG. 4 is a schematic flowchart 2 of the password generation method in the second example of the present disclosure. Referring to FIG. 4, the method includes:

S401: Obtain a user password generation instruction from an application to be logged in;

The user password generating instruction is used to indicate the user password of the application to be logged in, and carries the feature information of the application to be logged in. Here, the feature information can uniquely identify the target application to be logged in.

S402: Perform a user password generation instruction, and acquire feature information of the application to be logged in;

Here, after the user password generation instruction is obtained, in order to generate the user password, the feature information of the application to be logged in is first obtained from the user password generation instruction, so as to acquire the corresponding feature data.

S403: Search for corresponding feature data according to the feature information.

Here, the feature data corresponding to the application to be logged in may be searched from the local database according to the feature information.

In practical applications, in order to facilitate user operation, when a user registers for an application, the corresponding feature data and the data used to generate the feature data are stored in a local database according to the feature information of the application, so that Regenerate the user password when logging in to the app.

S404: Receive a core user password input by the user;

S405: Generate a key according to a core user password.

S406: Perform an encryption operation according to the key and the feature data to generate a user password.

In this way, the user password when the user logs in to the application is generated, so that the user can log in to the application.

Finally, the process of generating a user password when the user password is updated is described.

Then, FIG. 5 is a schematic flowchart 3 of the password generation method in the second example of the disclosure. Referring to FIG. 5, the method includes:

S501: Obtain a user password update instruction from the target application;

Here, the user password update instruction is used to instruct to update the user password in the target application according to the current system time information, and carry the feature information of the target application.

S502: Perform a user password update instruction to acquire feature information of the target application.

Here, after obtaining the user password update instruction, in order to query the corresponding feature data of the target application, the feature information of the target application may be acquired first.

S503: Search for corresponding feature data according to the feature information.

S504: Acquire current system time information, and update feature data.

In an actual application, in order to update the user password, when the feature data is as shown in the expression (1), the time information in the feature data stored in the local database may be replaced with the time information of the current system to update the feature data; When the feature data is as shown in Expression (6), the time information of the current system added to the feature data may be given, so that the updated feature data is as shown in Expression (1). Here, the embodiments of the present disclosure are not specifically limited.

Data_Para=APK_Info||User_Name (6)

Wherein, "||" indicates a data concatenation operation, Data_Para is a feature data, APK_Info is a feature information of the application, and User_Name is a user name.

S505: Receive a core user password input by the user;

S506: Generate a key according to a core user password.

S507: Perform an encryption operation according to the key and the updated feature data, and update the user password.

In this way, the user password in the update target application is completed.

Example three

Based on a similar inventive concept, FIG. 6 is a schematic structural diagram of a password generating apparatus in Example 3 of the present disclosure. Referring to FIG. 6, the password generating apparatus 60 includes: a data input module 601, a key generation module 602, and a password operation main module. 603, wherein the data input module 601 is configured to acquire feature data of the object to be logged in and a core user password; the key generation module 602 is configured to generate a key based on the core user password; and the cryptographic operation main module 603 is configured to adopt the first preset encryption. The algorithm performs an encryption operation on the key and the feature data to obtain a user password, wherein the user password is used to log in the object to be logged in.

The key generation module is further configured to adopt a second preset encryption algorithm, encrypt and calculate a core user password, obtain a source password, and intercept a preset length of data from the source password to obtain a key.

The cryptographic operation main module is further configured to use a symmetric encryption algorithm to perform operations on the key and the feature data to obtain an encryption operation result; and obtain a password setting rule of the object to be logged in, wherein the password setting rule includes at least a password character supported by the object to be logged in Type and password length; the encryption operation result is processed according to the password setting rule, and the user password is obtained.

The cryptographic operation main module is further configured to map each byte data of the cryptographic operation result to a character in a cipher character type supported by the object to be logged; obtain a character string satisfying the password length based on the character; and determine the character string as the user password .

In practical applications, the data input module, the key generation module, and the cryptographic operation main module may be a Central Processing Unit (CPU), a Micro Processor Unit (MPU), and a Digital Signal Processor (DSP). Digital Signal Processor), or Field Programmable Gate Array (FPGA).

The description of the above device embodiments is similar to the description of the above method embodiments, and has similar advantageous effects as the method embodiments, and thus will not be described again. For the technical details that are not disclosed in the embodiments of the present disclosure, please refer to the description of the method embodiments of the present disclosure, and the details are not described herein.

Those of ordinary skill in the art will appreciate that all or some of the steps, systems, and functional blocks/units of the methods disclosed above may be implemented as software, firmware, hardware, and suitable combinations thereof. In a hardware implementation, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be composed of several physical The components work together. Some or all of the components may be implemented as software executed by a processor, such as a digital signal processor or microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit. Such software may be distributed on a computer readable medium, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As is well known to those of ordinary skill in the art, the term computer storage medium includes volatile and nonvolatile, implemented in any method or technology for storing information, such as computer readable instructions, data structures, program modules or other data. Sex, removable and non-removable media. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical disc storage, magnetic cartridge, magnetic tape, magnetic disk storage or other magnetic storage device, or may Any other medium used to store the desired information and that can be accessed by the computer. Moreover, it is well known to those skilled in the art that communication media typically includes computer readable instructions, data structures, program modules, or other data in a modulated data signal, such as a carrier wave or other transport mechanism, and can include any information delivery media. .

The above description is only for the exemplary embodiments of the present disclosure, and is not intended to limit the scope of the disclosure.

Industrial applicability

Claims

A method for generating a password, comprising:

Obtaining feature data of the object to be logged in (S201) and a core user password (S202);

Generating a key based on the core user password (S203);

And performing the encryption operation on the key and the feature data by using a first preset encryption algorithm to obtain a user password (S204), wherein the user password is used to log in to the object to be logged in.
The method according to claim 1, wherein the feature data of the object to be logged in is at least the feature information of the object to be logged in, the user name registered in the object to be logged in, and the time information corresponding to the object to be logged in And one or more data components, wherein the time information is time information for registering the user name in the object to be logged in or time information for modifying the user password last time.
The method of claim 1, wherein the generating a key based on the core user password (S203) comprises:

Using a second preset encryption algorithm, encrypting and calculating the core user password to obtain a source password;

A preset length of data is intercepted from the source password as the key.
The method according to claim 3, wherein the preset length is a key length used when the first preset encryption algorithm performs an encryption operation.
The method according to claim 1, wherein the encrypting the key and the feature data by using a first preset encryption algorithm to obtain a user password (S204) includes:

Using a symmetric encryption algorithm, performing operations on the key and the feature data to obtain an encryption operation result;

Obtaining a password setting rule of the object to be logged in, wherein the password setting rule includes a password character type supported by the object to be logged in and a password length;

And processing the encryption operation result according to the password setting rule to obtain the user password.
The method according to claim 5, wherein the processing the encryption operation result according to the password setting rule to obtain the user password comprises:

Mapping each byte data of the encryption operation result to a character in a password character type supported by the object to be registered;

Obtaining a character string satisfying the length of the password based on the character;

The character string is determined as the user password.
A password generating device (60) includes: a data input module (601), a key generation module (602), and a cryptographic operation main module (603), wherein

The data input module (601) is configured to acquire feature data of the object to be logged in and a core user password;

The key generation module (602) is configured to generate a key based on the core user password;

The cryptographic operation main module (603) is configured to use a first preset encryption algorithm to perform an encryption operation on the key and the feature data to obtain a user password, where the user password is used to log in to the login Object.
The apparatus (60) according to claim 7, wherein the key generation module (602) is further configured to encrypt the core user password by using a second preset encryption algorithm to obtain a source password; The source password is intercepted as data of a preset length.
The apparatus (60) according to claim 7, wherein the cryptographic operation main module (603) is configured to input the key and the feature data into a symmetric encryption algorithm to obtain an cryptographic operation result; and obtain the to-be-registered a password setting rule of the object, wherein the password setting rule includes a password character type supported by the object to be registered and a password length; and the encryption operation result is processed according to the password setting rule to obtain the user password.
The apparatus (60) according to claim 9, wherein said cryptographic operation main module (603) is arranged to map each byte data of said cryptographic operation result to a cipher character type supported by said object to be logged in a character in the file; based on the character, obtaining a character string satisfying the length of the password; determining the character string as the user password.
A computer readable storage medium storing computer executable instructions that, when executed by a processor, implement the method of any of claims 1-6.